Marc Delisle
2007-Jan-25 13:31 UTC
[Samba] connection to IPC$ denied due to security descriptor
Hello, Samba 3.0.23d All users of a company can no longer log in (security = domain) to a Samba server since three days. In syslog there are plenty of these: Jan 23 09:46:34 localhost smbd[5672]: make_connection: connection to IPC$ denied due to security descriptor. Help us please... Marc Delisle
Volker Lendecke
2007-Jan-25 13:50 UTC
[Samba] connection to IPC$ denied due to security descriptor
On Thu, Jan 25, 2007 at 08:25:25AM -0500, Marc Delisle wrote:> In syslog there are plenty of these: > Jan 23 09:46:34 localhost smbd[5672]: make_connection: connection to > IPC$ denied due to security descriptor.Someone has used Windows srvmgr.exe or an equivalent tool to set a security descriptor for IPC$ in the file share_info.tdb. Either connect to the Samba server with srvmgr.exe and set the correct permissions on IPC$, or if all your access checks are done via 'valid users' and other setings in smb.conf, then you can safely delete the file share_info.tdb. But please be aware that this resets all custom share security descriptor settings back to default. Volker -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.samba.org/archive/samba/attachments/20070125/b970cda3/attachment.bin
On Thu, 2007-01-25 at 08:25 -0500, Marc Delisle wrote:> Hello, > Samba 3.0.23d > > All users of a company can no longer log in (security = domain) to a > Samba server since three days. > > In syslog there are plenty of these: > Jan 23 09:46:34 localhost smbd[5672]: make_connection: connection to > IPC$ denied due to security descriptor. > > Help us please...You must have being playing with shares security tab via server manager! 2 options: - Fire up server manager on an admin workstaion, login to the server and change the security of the IPC$ share back to what it was originally. - Delete share_info.tdb and restart samba (you will loose ALL the SDs set via Server Manager on shares, but this will bring you back to the default). Simo. -- Simo Sorce Samba Team GPL Compliance Officer email: idra@samba.org http://samba.org